ReCaptchaNoCaptcha.php
No OneTemporary
Actions

Size

7 KB

Referenced Files

None

Subscribers

None

ReCaptchaNoCaptcha.php
View Options

	<?php

	namespace MediaWiki\Extension\ConfirmEdit\ReCaptchaNoCaptcha;

	use MediaWiki\Api\ApiBase;
	use MediaWiki\Auth\AuthenticationRequest;
	use MediaWiki\Extension\ConfirmEdit\Auth\CaptchaAuthenticationRequest;
	use MediaWiki\Extension\ConfirmEdit\Hooks;
	use MediaWiki\Extension\ConfirmEdit\SimpleCaptcha\SimpleCaptcha;
	use MediaWiki\Html\Html;
	use MediaWiki\Json\FormatJson;
	use MediaWiki\Language\RawMessage;
	use MediaWiki\MediaWikiServices;
	use MediaWiki\Message\Message;
	use MediaWiki\Request\WebRequest;
	use MediaWiki\Status\Status;

	class ReCaptchaNoCaptcha extends SimpleCaptcha {
	/**
	* @var string used for renocaptcha-edit, renocaptcha-addurl, renocaptcha-badlogin, renocaptcha-createaccount,
	* renocaptcha-create, renocaptcha-sendemail via getMessage()
	*/
	protected static $messagePrefix = 'renocaptcha-';

	/** @var string\|null */
	private $error = null;

	/**
	* Get the captcha form.
	* @param int $tabIndex
	* @return array
	*/
	public function getFormInformation( $tabIndex = 1 ) {
	global $wgReCaptchaSiteKey, $wgLang;
	$lang = htmlspecialchars( urlencode( $wgLang->getCode() ) );

	$output = Html::element( 'div', [
	'class' => [
	'g-recaptcha',
	'mw-confirmedit-captcha-fail' => (bool)$this->error,
	],
	'data-sitekey' => $wgReCaptchaSiteKey
	] );
	$htmlUrlencoded = htmlspecialchars( urlencode( $wgReCaptchaSiteKey ) );
	$output .= <<<HTML
	<noscript>
	<div>
	<div style="width: 302px; height: 422px; position: relative;">
	<div style="width: 302px; height: 422px; position: absolute;">
	<iframe
	src="https://www.recaptcha.net/recaptcha/api/fallback?k={$htmlUrlencoded}&hl={$lang}"
	frameborder="0" scrolling="no"
	style="width: 302px; height:422px; border-style: none;">
	</iframe>
	</div>
	</div>
	<div style="width: 300px; height: 60px; border-style: none;
	bottom: 12px; left: 25px; margin: 0px; padding: 0px; right: 25px;
	background: #f9f9f9; border: 1px solid #c1c1c1; border-radius: 3px;">
	<textarea id="g-recaptcha-response" name="g-recaptcha-response"
	class="g-recaptcha-response"
	style="width: 250px; height: 40px; border: 1px solid #c1c1c1;
	margin: 10px 25px; padding: 0px; resize: none;" >
	</textarea>
	</div>
	</div>
	</noscript>
	HTML;
	return [
	'html' => $output,
	'headitems' => [
	// Insert reCAPTCHA script, in display language, if available.
	// Language falls back to the browser's display language.
	// See https://developers.google.com/recaptcha/docs/faq
	"<script src=\"https://www.recaptcha.net/recaptcha/api.js?hl={$lang}\" async defer></script>"
	]
	];
	}

	/**
	* @return string[]
	*/
	public static function getCSPUrls() {
	return [ 'https://www.recaptcha.net/recaptcha/api.js' ];
	}

	/**
	* @param Status\|array\|string $info
	*/
	protected function logCheckError( $info ) {
	if ( $info instanceof Status ) {
	$errors = $info->getErrorsArray();
	$error = $errors[0][0];
	} elseif ( is_array( $info ) ) {
	$error = implode( ',', $info );
	} else {
	$error = $info;
	}

	wfDebugLog( 'captcha', 'Unable to validate response: ' . $error );
	}

	/**
	* @param WebRequest $request
	* @return array
	*/
	protected function getCaptchaParamsFromRequest( WebRequest $request ) {
	// ReCaptchaNoCaptcha combines captcha ID + solution into a single value
	// API is hardwired to return captchaWord, so use that if the standard isempty
	// "captchaWord" is sent as "captchaword" by visual editor
	$index = 'not used';
	$response = $request->getVal(
	'g-recaptcha-response',
	$request->getVal( 'captchaWord', $request->getVal( 'captchaword' ) )
	);
	return [ $index, $response ];
	}

	/**
	* Check, if the user solved the captcha.
	*
	* Based on reference implementation:
	* https://github.com/google/recaptcha#php
	*
	* @param mixed $_ Not used (ReCaptcha v2 puts index and solution in a single string)
	* @param string $word captcha solution
	* @return bool
	*/
	protected function passCaptcha( $_, $word ) {
	global $wgRequest, $wgReCaptchaSecretKey, $wgReCaptchaSendRemoteIP;

	$url = 'https://www.recaptcha.net/recaptcha/api/siteverify';
	// Build data to append to request
	$data = [
	'secret' => $wgReCaptchaSecretKey,
	'response' => $word,
	];
	if ( $wgReCaptchaSendRemoteIP ) {
	$data['remoteip'] = $wgRequest->getIP();
	}
	$url = wfAppendQuery( $url, $data );
	$request = MediaWikiServices::getInstance()->getHttpRequestFactory()
	->create( $url, [ 'method' => 'POST' ], __METHOD__ );
	$status = $request->execute();
	if ( !$status->isOK() ) {
	$this->error = 'http';
	$this->logCheckError( $status );
	return false;
	}
	$response = FormatJson::decode( $request->getContent(), true );
	if ( !$response ) {
	$this->error = 'json';
	$this->logCheckError( $this->error );
	return false;
	}
	if ( isset( $response['error-codes'] ) ) {
	$this->error = 'recaptcha-api';
	$this->logCheckError( $response['error-codes'] );
	return false;
	}

	return $response['success'];
	}

	/**
	* @param array &$resultArr
	*/
	protected function addCaptchaAPI( &$resultArr ) {
	$resultArr['captcha'] = $this->describeCaptchaType();
	$resultArr['captcha']['error'] = $this->error;
	}

	/**
	* @return array
	*/
	public function describeCaptchaType() {
	global $wgReCaptchaSiteKey;
	return [
	'type' => 'recaptchanocaptcha',
	'mime' => 'application/javascript',
	'key' => $wgReCaptchaSiteKey,
	];
	}

	/**
	* Show a message asking the user to enter a captcha on edit
	* The result will be treated as wiki text
	*
	* @param string $action Action being performed
	* @return Message
	*/
	public function getMessage( $action ) {
	$msg = parent::getMessage( $action );
	if ( $this->error ) {
	$msg = new RawMessage( '<div class="error">$1</div>', [ $msg ] );
	}
	return $msg;
	}

	/**
	* @param ApiBase $module
	* @param array &$params
	* @param int $flags
	* @return bool
	*/
	public function apiGetAllowedParams( ApiBase $module, &$params, $flags ) {
	if ( $flags && $this->isAPICaptchaModule( $module ) ) {
	$params['g-recaptcha-response'] = [
	ApiBase::PARAM_HELP_MSG => 'renocaptcha-apihelp-param-g-recaptcha-response',
	];
	}

	return true;
	}

	/**
	* @inheritDoc
	*/
	public function getError() {
	return $this->error;
	}

	/**
	* @inheritDoc
	*/
	public function storeCaptcha( $info ) {
	// ReCaptcha is stored by Google; the ID will be generated at that time as well, and
	// the one returned here won't be used. Just pretend this worked.
	return 'not used';
	}

	/**
	* @inheritDoc
	*/
	public function retrieveCaptcha( $index ) {
	// just pretend it worked
	return [ 'index' => $index ];
	}

	/**
	* @inheritDoc
	*/
	public function getCaptcha() {
	// ReCaptcha is handled by frontend code + an external provider; nothing to do here.
	return [];
	}

	/**
	* @return ReCaptchaNoCaptchaAuthenticationRequest
	*/
	public function createAuthenticationRequest() {
	return new ReCaptchaNoCaptchaAuthenticationRequest();
	}

	/**
	* @param array $requests
	* @param array $fieldInfo
	* @param array &$formDescriptor
	* @param string $action
	*/
	public function onAuthChangeFormFields(
	array $requests, array $fieldInfo, array &$formDescriptor, $action
	) {
	global $wgReCaptchaSiteKey;

	$req = AuthenticationRequest::getRequestByClass( $requests,
	CaptchaAuthenticationRequest::class, true );
	if ( !$req ) {
	return;
	}

	// ugly way to retrieve error information
	$captcha = Hooks::getInstance();

	$formDescriptor['captchaWord'] = [
	'class' => HTMLReCaptchaNoCaptchaField::class,
	'key' => $wgReCaptchaSiteKey,
	'error' => $captcha->getError(),
	] + $formDescriptor['captchaWord'];
	}
	}

File Metadata

Mime Type: text/x-php
Expires: Sat, Oct 3, 11:35 (4 d, 22 h ago)
Storage Engine: local-disk
Storage Format: Raw Data
Storage Handle: 84/c9/31deb1da268a62f3a05eaf167ee5
Default Alt Text: ReCaptchaNoCaptcha.php (7 KB)

ReCaptchaNoCaptcha.phpNo OneTemporaryActions

ReCaptchaNoCaptcha.phpView Options

File Metadata

Event Timeline

ReCaptchaNoCaptcha.php
No OneTemporary
Actions

ReCaptchaNoCaptcha.php
View Options